SKYCOT Download

Privacy

Last updated 28 October 2026 · applies to the SKYCOT app and skycot.com

SKYCOT is designed so that we hold as little about you as possible. The app runs on your Mac, your files stay on your Mac, and the only company that receives your work is the AI assistant you sign in to and choose to use. This page explains that in detail, and what the website does.

The short version

1. Who we are

SKYCOT is a registered business name of Curble Pty Ltd (ABN 71 605 512 776), Melbourne, Australia. You can reach us at markhallam@skycot.com. We are bound by the Australian Privacy Act 1988 and the Australian Privacy Principles to the extent they apply to us, and we aim to meet them in any case.

2. The SKYCOT app

What stays on your Mac

Your project folders stay where you keep them. The versions SKYCOT keeps so you can undo are stored inside each project's own folder history. Your conversations, settings and technical logs are stored in your home folder under ~/.skycot and in the app's own data folder. Signing in to each assistant happens on that company's own sign-in page; the sign-in token that results is kept on your Mac, by SKYCOT or by the assistant's own tool, and SKYCOT never sees your password. You can delete all of this at any time by removing the app and those folders.

What is sent to the AI assistant you chose

The assistant works in the project folder you open. When you send a message, the assistant's own tool reads what it needs from that folder for the task and sends it, with your message and any pictures you add to it (such as a child's drawing), to the company that makes it, under your account: Anthropic for Claude Code, OpenAI for Codex, Anysphere for Cursor, Google for Gemini and Antigravity, or the maker of any other assistant you connect. That company's privacy policy and your agreement with them govern what happens to it, including whether it may be used to improve or train their models; you can check and change that in your account with them. SKYCOT does not add a copy for itself. In Ask me first, the assistant stops and asks before doing anything beyond the plan, and the hard rules mean touching customer details is always a question, never an assumption.

Voice typing and reading aloud

Voice typing is off until you turn it on, and in a Family profile each child's starts off and needs the parent code. SKYCOT never records, uploads or keeps audio. It uses the speech service of the browser you use it in: in Safari, Apple's dictation, which on recent Macs can run on the Mac itself and otherwise goes to Apple; in Chrome, Google's speech service; in Edge, Microsoft's. Where the sound goes to one of those companies, their terms and privacy policy apply. SKYCOT says which applies in Settings → Voice before you switch it on, and recommends Safari for children. The words appear in the message box and are sent to your assistant only when you press Send. Reading replies aloud uses the voices installed on your Mac, so nothing is sent anywhere.

What is sent to us

SKYCOT does not receive your files, messages, project details or AI replies. We count successful Mac update checks and, when a grown-up turns it on, relay connections as anonymous daily totals. For an update check, Cloudflare makes a short code from the request's IP address and app user-agent; for a relay connection, it makes a short code from the home Mac's or linked device's relay id. The count record contains only that code, the UTC day, the count type and, for update checks, the app version. The code changes each day, has no name or account attached, and the count record alone cannot tell us who made a request or connect activity between days. We do not save the source IP address, user-agent or relay id in these count records. Cloudflare processes network addresses to deliver requests. Do Not Track or Global Privacy Control turns off update-feed counting; turning off automatic updates or SKYCOT Relay stops the relevant requests. SKYCOT has no crash reporting or diagnostics switched on. One switch you control changes what the Mac connects to: if a grown-up turns on SKYCOT Relay so the family's phones can reach the Mac away from home, the Mac connects to our relay, which passes along sealed traffic it cannot read (see section 5). The online account and phone-pairing service that T3 Code offers is switched off in SKYCOT, so the app does not talk to T3 Tools Inc.'s servers either. If a future version offers optional diagnostics, it will be off until you switch it on, this page will be updated first, and it will never include your project files or conversations.

Background downloads

Like most apps, SKYCOT fetches a few public files on its own. The Mac app checks downloads.skycot.com, SKYCOT's own download site, for a new version of SKYCOT. If update checks for your AI assistants are on, it asks npm, the public software registry, whether a newer version of each assistant you installed exists. When a grown-up opens the Usage page in Advanced mode, it downloads a public list of AI prices from GitHub, at most once a day. The first time the assistant looks at a page it built, it downloads a small browser from Google (about 200 MB) and says so first; this is off in a Family profile. If you add Gemini through Antigravity, it downloads Google's connector from Google. Like any web request, these reveal your IP address and the app's version to the host. Nothing about you or your projects is included, and SKYCOT fetches nothing from T3 Code's servers.

Permissions your Mac may ask for

macOS may ask you to let SKYCOT open the folders you choose, show notifications and, if you use voice typing, use the microphone. If you turn on sharing so that another of your devices can connect to SKYCOT, that device connects to your Mac directly over your own network, with no SKYCOT or T3 server in between. You can change these at any time in System Settings and in SKYCOT's Settings.

Publishing

If you connect a code-hosting account (for example GitHub) to send work for review or put it live, SKYCOT talks to that service on your instruction only, using your own account. Their terms and privacy policy apply to what you upload there.

3. The website, skycot.com

The site is a set of plain pages served by Cloudflare. The cloud on the site switches between day and dusk using your device's own clock and time zone, worked out in your browser; nothing about that is sent anywhere. We set no cookies and run no advertising. To see how many people visit and which pages help, we use Cloudflare Web Analytics: a small script from Cloudflare that counts page views and records the page, the site that linked you here, your browser and device type, your country and how fast the page loaded. It sets no cookies, doesn't build a profile of you and doesn't follow you to other sites; we only see totals, never who you are. Cloudflare, like any host, processes the technical details of each request (such as IP address and browser type) to deliver the page and protect the site, and it may ask your browser to report failed connections so that network problems can be fixed; see Cloudflare's privacy policy for how they handle that. We do not combine it with anything else.

4. Email and Discord

If you email us (for example beta feedback sent from Settings → Help & feedback, which only ever leaves your Mac when you press Send in your own email app), we keep the email for as long as we need it to help you and to keep ordinary business records, and then delete it. Emails are kept for as long as we need them to help you and to keep ordinary business records, and are then deleted. Our email runs on Google Workspace. Our community runs on Discord, a separate company with its own privacy policy; what you post there is governed by it.

5. Companies that handle information for us

SKYCOT Relay, for reaching your Mac away from home (optional, off until you turn it on). If a grown-up turns on Reach this Mac from anywhere in SKYCOT's Family settings, your Mac keeps a connection to SKYCOT Relay, a small service we run on Cloudflare, so the family's linked phones and iPads can reach it when they are not on your home Wi-Fi. Everything between a device and your Mac is sealed on the device and opened only on your Mac; the relay passes it along and cannot read it, and it never receives names, messages, files or projects. It does see a random id for your home and for each linked device, when devices connect, roughly how much they send, and their network addresses, and it keeps only what it needs to connect them. If phone notifications are turned on, Apple delivers them, and they only ever say that SKYCOT needs a grown-up or that something has finished. The sealing follows the open Noise protocol standard (Noise_IK_25519_ChaChaPoly_SHA256) and has been checked against that standard's official test vectors, but it has not been independently audited: SKYCOT is a beta, and we make no promise that the relay is secure. Turn the switch off and your Mac stops connecting to it.

These companies may store information outside Australia, including in the United States. We do not share personal information with anyone else, except where the law requires it, where it is needed to protect people or our rights against fraud or harm, or if the SKYCOT business is sold or reorganised, in which case this policy continues to apply to what we hold.

6. Security

We keep what we hold to a minimum and protect it with the security of the services above, with access limited to the people who need it. No system is perfectly secure. The security of your Mac, your AI accounts and anything you connect to SKYCOT is in your hands, so keep them up to date and protected. If you find a security problem in SKYCOT or skycot.com, please email markhallam@skycot.com with "Security" in the subject before telling anyone else, and do not include passwords or keys.

7. Your rights

You can ask us what we hold about you, ask us to correct or delete it, or complain about how we handled it, by emailing markhallam@skycot.com. We will respond within 30 days. If you are not satisfied you can contact the Office of the Australian Information Commissioner (oaic.gov.au). If you are in the UK or the European Union, you have equivalent rights under the UK GDPR and the EU GDPR, including the right to lodge a complaint with your local supervisory authority.

8. Children and the Family profile

SKYCOT is designed so that a child uses it only on a parent's or guardian's own Mac, signed in to that adult's own AI account, with the Family profile turned on and the adult supervising. The adult installs SKYCOT, accepts our terms and the AI service's terms, and is responsible for the child's use. A child does not need, and should not create, an account with us or with an AI service to use SKYCOT; SKYCOT has no account of its own.

We do not knowingly collect personal information from children, and the Family profile does not change what we receive, which is nothing (unless a grown-up turns on SKYCOT Relay, which passes along sealed traffic it cannot read; see section 5). Everything the Family profile keeps stays in SKYCOT's own storage on your Mac and is never sent to us or to the AI service: for each child, a first name (if you give one), a picture, look, text size, voice settings, bedtime and daily limits; the household's time zone, used for bedtime; and a scrambled version of the parent code, never the code itself. To run the limits and the grown-up recap it also keeps, on the Mac, each child's time and counts for the last five weeks, who started each conversation, any extra time a grown-up gave, and a log of what needed a grown-up, which records only the kind of detail involved and is kept for 30 days. Earned stickers and the pages pinned to the family fridge are kept there too. The recap is built on the Mac and shown only after the parent code; printing it or saving it as a PDF uses your browser's print dialog, and nothing is emailed or uploaded. Turning the Family profile off forgets the children, their limits and the parent code.

Before a child's message goes, SKYCOT looks for personal details such as a full name, school, address, phone number, email or birthday, and suggests leaving them out. This check runs on the Mac. It spots common patterns, so it can miss a detail written in an unusual way.

We do not collect children's names or work through the counter. It records anonymous daily totals for update checks and optional relay connections, with no name or account attached. If you believe a child has sent us personal information, for example by email, tell us and we will delete it.

What a child types into SKYCOT goes to the AI service the adult chose, under the adult's account and that company's privacy policy, exactly as with any other use. Each AI service sets its own minimum age and its own rules on who may use an account, and some require every user to be 18 or over. Those rules apply, and the adult is responsible for checking them before a child uses SKYCOT. The Family profile is a set of guardrails inside SKYCOT, not a parental-control product: it does not filter the web, and it asks the AI to keep things child-friendly but cannot guarantee what the AI says. Its bedtime and daily limits apply only inside SKYCOT.

9. Changes

If this policy changes, the new version will be posted here with its date before it applies, and the app will tell you on first launch after an update if the change affects what the app sends.